$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: r1t71Q756mN8pW3jPhHnraTiDNQFSxSfWeboSzS2lMc= Subject key identifier: E0:02:3E:80:A9:86:5F:11:68:70:3F:2B:0D:D6:AD:FE:BD:40:E5:23 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 6EB6FFA177E1AE90AB84F8F44DC90C91210EF496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 038A Signing time: Fri 17 Apr 2026 14:03:07 +0000 Manifest this update: Fri 17 Apr 2026 13:58:07 +0000 Manifest next update: Mon 20 Apr 2026 17:17:07 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 2: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 3: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: 5gmaru0Tdo7Fbp5z28U/51BaGOXIcABE9J1jOA7XzXw=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b6:ff:a1:77:e1:ae:90:ab:84:f8:f4:4d:c9:0c:91:21:0e:f4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Apr 17 13:58:07 2026 GMT Not After : Apr 20 17:17:07 2026 GMT Subject: CN=E0023E80A9865F1168703F2B0DD6ADFEBD40E523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:87:42:63:9a:32:9f:89:57:53:3c:01:86: ee:ee:d4:bd:85:d8:0a:b9:1f:79:5c:2a:32:aa:62: fc:3b:ba:6c:8d:54:bd:58:6e:4d:92:0d:27:e6:f8: e4:dd:f3:b0:2f:d1:be:b5:34:00:fa:1c:5d:b1:7c: f8:2b:e1:9b:56:03:77:3c:88:f1:0d:c1:f9:f0:bd: 2b:85:2a:b0:f9:6c:22:89:c4:8b:84:88:97:29:3d: f8:4a:b2:d1:59:f2:1e:8d:52:56:4b:d9:78:15:a4: d6:e3:8a:6d:14:43:46:55:19:9f:bb:1f:7a:5c:3e: 82:ac:0f:3c:ab:90:79:fb:51:2c:43:a6:3c:28:1f: 1f:9c:d7:fb:7f:0d:d4:2a:5f:db:cd:81:7b:87:b1: f3:b9:53:46:2c:19:4e:a7:a8:a4:e2:dd:96:19:b3: 38:a0:bf:47:65:07:a4:d0:84:01:bd:54:c7:56:a0: fb:a5:fd:dd:85:54:ce:9d:67:8c:6c:ec:22:86:ff: 33:19:3c:32:b0:03:da:dc:82:1c:c7:8b:4d:2f:d2: 48:ff:ea:2e:06:98:30:da:8d:7f:5e:80:3b:d2:fd: 96:6c:bf:86:4d:dc:20:e9:7d:79:7d:8e:d8:bb:39: f7:ec:ba:2b:0a:50:43:b1:e5:94:20:0a:09:fa:d6: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:3E:80:A9:86:5F:11:68:70:3F:2B:0D:D6:AD:FE:BD:40:E5:23 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:59:23:8d:f9:7f:4b:16:d0:ab:61:26:dd:8a:20:84:94:97: fb:fe:53:b8:46:ed:e8:c2:f2:20:d6:25:34:c0:91:92:3d:d0: 61:4c:3f:83:75:13:e2:dc:27:3c:35:64:46:70:37:01:fb:f6: 0d:fd:f8:ea:bb:07:99:5b:8e:47:9e:da:88:2a:18:a6:66:c6: 6d:81:ff:a0:c1:97:31:69:ca:7b:31:46:f4:1a:cf:21:d4:e5: b0:05:a3:96:92:c2:25:fb:89:eb:b4:4d:2e:bf:8e:b7:dc:36: 5b:42:9e:94:d3:fe:55:88:6f:83:cb:33:13:b3:6b:33:84:fc: 1c:03:7a:bc:74:41:f6:10:7f:a1:03:10:13:bc:46:d6:af:b0: e9:52:33:ff:42:6e:93:b2:75:5e:b9:41:d6:13:75:2a:a8:29: 0b:e0:2e:0e:0a:b4:6a:01:a5:f3:23:c9:6e:a2:e7:40:55:6f: 1d:99:90:29:f4:9b:27:b8:1d:35:bf:77:c2:01:a7:0c:a8:23: d7:41:eb:4b:ce:16:69:1e:51:8f:e2:0e:28:37:ba:14:3b:e6: 2d:26:a0:0e:63:02:ee:fe:99:42:f7:e8:50:de:f7:1b:36:b5: 17:ed:34:01:0b:16:72:fc:76:8a:39:70:9f:2e:4b:04:de:62: 52:11:33:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrb/oXfhrpCrhPj0TckMkSEO9JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNjA0MTcxMzU4MDdaFw0yNjA0MjAxNzE3MDdaMDMxMTAvBgNV BAMTKEUwMDIzRTgwQTk4NjVGMTE2ODcwM0YyQjBERDZBREZFQkQ0MEU1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkYdCY5oyn4lXUzwBhu7u1L2F 2Aq5H3lcKjKqYvw7umyNVL1Ybk2SDSfm+OTd87Av0b61NAD6HF2xfPgr4ZtWA3c8 iPENwfnwvSuFKrD5bCKJxIuEiJcpPfhKstFZ8h6NUlZL2XgVpNbjim0UQ0ZVGZ+7 H3pcPoKsDzyrkHn7USxDpjwoHx+c1/t/DdQqX9vNgXuHsfO5U0YsGU6nqKTi3ZYZ szigv0dlB6TQhAG9VMdWoPul/d2FVM6dZ4xs7CKG/zMZPDKwA9rcghzHi00v0kj/ 6i4GmDDajX9egDvS/ZZsv4ZN3CDpfXl9jti7OffsuisKUEOx5ZQgCgn61t+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4AI+gKmGXxFocD8rDdat/r1A5SMwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlZI435f0sW0KthJt2KIISUl/v+U7hG7ejC 8iDWJTTAkZI90GFMP4N1E+LcJzw1ZEZwNwH79g39+Oq7B5lbjkee2ogqGKZmxm2B /6DBlzFpynsxRvQazyHU5bAFo5aSwiX7ieu0TS6/jrfcNltCnpTT/lWIb4PLMxOz azOE/BwDerx0QfYQf6EDEBO8RtavsOlSM/9CbpOydV65QdYTdSqoKQvgLg4KtGoB pfMjyW6i50BVbx2ZkCn0mye4HTW/d8IBpwyoI9dB60vOFmkeUY/iDig3uhQ75i0m oA5jAu7+mUL36FDe9xs2tRftNAELFnL8doo5cJ8uSwTeYlIRM9s= -----END CERTIFICATE-----Generated at Fri Apr 17 23:40:06 2026 by rpki-client